1. Introduction

Welcome to touchless.org. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit or use our services. Our goal is to be transparent about our data practices and to ensure your privacy is respected and protected. By using our website and services, you consent to the practices described in this policy.

2. Data Collection

We may collect several types of information from and about users, including:

• Personal information you provide directly, such as your name, email address, postal address, and phone number when you create an account, request support, or complete transactions.
• Billing and transactional information, such as payment method and order details, to process purchases and manage your account.
• Usage data, such as pages visited, features used, time spent on our site, and search queries, collected through cookies and similar technologies.
• Device and location data, including IP address, browser type, operating system, and approximate geolocation, gathered to improve security and service delivery.
• Communications you send to us, for example when you contact customer support or participate in surveys or promotions.

We collect data directly from you when you provide it, from your use of our services (including cookies and analytics), and from third parties with your consent or as permitted by law.

3. Usage of Information

We use the information we collect to:

• Provide, maintain, and improve our services, products, and user experience.
• Process orders, manage your account, and handle refunds or inquiries.
• Personalize content, recommendations, and communications based on your preferences and engagement.
• Communicate with you about updates, security, and important notices related to your account or transactions.
• Analyze usage patterns to detect and prevent abuse, fraud, or security threats.
• Comply with legal obligations and enforce our terms and policies.

We may aggregate or de-identify data for analytics and research purposes, in a way that cannot reasonably be used to identify you.

4. Data Protection & Security

We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, disclosure, alteration, and destruction. This includes:

• Encryption of data in transit (TLS) and at rest where feasible.
• Access controls and authentication to limit who can view or process personal data.
• Regular monitoring, threat detection, and incident response procedures.
• Secure data storage and backup practices to reduce the risk of data loss.
• Vendor and service provider risk management to ensure third parties protect your data appropriately.

While no system can be guaranteed entirely secure, we continuously review and update our security measures to protect your information.

5. User Rights & Contact Information

You have rights regarding your personal information, including:

• Access: You may request confirmation of whether we are processing your personal data and obtain a copy of your data.
• Correction: You may request correction of inaccurate or incomplete data.
• Deletion: You may request deletion of your personal data in certain circumstances, subject to applicable legal rights and exemptions.
• Restriction: You may request restriction of processing in certain situations.
• Portability: You may request a portable copy of your data in a structured, commonly used, and machine-readable format where feasible.
• Objection or withdrawal of consent: Where processing is based on consent, you may withdraw that consent at any time, without affecting the lawfulness of processing based on prior consent.

If you have questions, requests, or concerns about our privacy practices, you may contact touchless.org at:

Email: privacy@touchless.org
Postal Address: touchless.org, Attn: Privacy Office, 123 Privacy Lane, Suite 400, Anytown, ST 12345
Phone: +1 (800) 555-0123

We will respond to requests in accordance with applicable laws and our internal policies. To protect your privacy and security, we may require verification of your identity before fulfilling certain requests.